By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.
Complete the form, and we'll reach out to you shortly.

By clicking Submit, I agree that the Privacy Policy and Supply Policy will govern the use of services I receive and personal data I provide respectively.

Thank you! Your message has been received!
Oops! Something went wrong. Please fill in the required fields and try again.

Privacy Policy (IAB TCF Vendor)

Last updated: 06.03.2026

1. Introduction

This Privacy Policy describes how Membrana Europe BV ("Company", "we", "us", or "our") collects, uses, and processes personal data when providing advertising technology services within the European Economic Area (EEA), United Kingdom, and Switzerland.

We participate in the IAB Europe Transparency & Consent Framework (TCF) and process personal data in accordance with its policies and technical specifications.

Our services may be integrated into websites, mobile applications, or other digital properties operated by publishers or partners.

2. Company Information

Membrana Europe BV
Address: Keizersgracht 391a, 1016 EJ, Amsterdam, Netherlands
Email: mk@membrana.media
Website: membrana.media

For privacy-related questions, please contact us at the email above.

3. Our Role Under Data Protection Laws

Depending on the context, Membrana Europe BV may act as:

  • Data Controller, when we determine the purposes and means of processing personal data.
  • Data Processor, when we process personal data on behalf of publishers or partners.

Within the IAB Transparency & Consent Framework, we act as a Vendor.

4. Categories of Data We May Process

We may process the following categories of personal data:

Device and Technical Information

  • Browser type
  • Operating system
  • Device type

Service Usage Information

  • Page visits
  • Ad requests
  • Ad impressions
  • Referring page URL
  • Timestamp

Approximate Location Data

  • Country
  • Region

We do not intentionally collect sensitive personal data.

5. Purposes of Processing (IAB TCF)

Under the IAB Transparency & Consent Framework, we process personal data only for the following purposes:

Purpose 1

Store and/or access information on a device

Cookies or similar technologies may be used to store and access identifiers on a user's device.

This enables the operation of our advertising technology services.

Processing under this purpose is performed only when user consent has been obtained via a CMP compliant with the IAB TCF.

Purpose 10

Develop and improve services

Information about your activity on this service, such as your interaction with ads or content, can be very helpful to improve products and services and to build new products and services based on user interactions, the type of audience, etc. This specific purpose does not include the development or improvement of user profiles and identifiers.

6. Legal Basis for Processing

We rely on the following legal bases under the General Data Protection Regulation (GDPR):

Consent (Article 6(1)(a))

Processing under Purpose 1 is based on user consent, obtained through a Consent Management Platform (CMP) compliant with the IAB Transparency & Consent Framework.

7. Cookies and Similar Technologies

We may use cookies or similar technologies to:

  • support the operation of advertising technology services

Users can manage or withdraw consent at any time through the Consent Management Platform (CMP) implemented on the website or application.

8. Data Sharing

We may share limited technical and advertising-related data with trusted partners, including:

  • publishers
  • advertising exchanges
  • demand-side platforms (DSPs)
  • supply-side platforms (SSPs)
  • service providers supporting our technology

All partners are required to comply with applicable data protection laws and the IAB TCF policies.

9. International Data Transfers

Personal data may be processed or transferred outside the European Economic Area (EEA).

Where such transfers occur, we ensure appropriate safeguards including:

  • Standard Contractual Clauses (SCCs)
  • other lawful transfer mechanisms in accordance with GDPR

10. Data Retention

Personal data is retained only for as long as necessary to support the purposes described in this policy.

Retention periods generally do not exceed 13 months, unless a shorter retention period is required by applicable law.

11. User Rights

Users in the EEA, UK, and Switzerland have the following rights under GDPR:

  • right of access
  • right to rectification
  • right to erasure
  • right to restriction of processing
  • right to object to processing
  • right to withdraw consent at any time
  • right to lodge a complaint with a supervisory authority

Requests may be submitted to: [ mk@membrana.media ]

12. Data Security

We implement appropriate technical and organizational security measures to protect personal data, including:

  • access controls
  • encryption where appropriate
  • monitoring and security procedures
  • internal data protection policies

13. Children's Data

Our services are not directed at children under 16, and we do not knowingly collect personal data from children.

14. Changes to This Policy

We may update this Privacy Policy periodically.

The Last Updated date will be revised when changes are made.

15. Contact

For privacy-related inquiries:

‍Email: mk@membrana.media